tk667 Privacy Policy

1 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes, but is not limited to, your name, date of birth, email address, phone number, payment details, device identifiers, and IP address.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means tk667, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of tk667 in accordance with documented instructions.
• "KYC (Know Your Customer)" means the identity and age verification process required before certain account functions (particularly withdrawals) are enabled.
• "Cookies" means small text files placed on your device by the tk667 platform for session management, preference storage, and analytics purposes.
• "Bangladesh Standard Time (BST)" means UTC+6, the time zone used for all platform activity timestamps and data retention calculations.

2 Data We Collect

tk667 collects the following categories of personal data from players on the platform. We collect only what is necessary for the legitimate purposes described in this policy.

2.1 Registration Data

When you create a tk667 account, we collect your full legal name, date of birth, email address, mobile phone number, and preferred currency (BDT). This information is mandatory — without it, we cannot create or maintain a valid account.

2.2 Identity Verification (KYC) Data

To comply with age verification and fraud prevention obligations, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or birth certificate, as well as proof of address such as a recent utility bill or bank statement in your name.

2.3 Financial Data

When you make deposits or request withdrawals, we collect transaction records including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard), transaction amounts in BDT, timestamps, and reference numbers. We do not store full card numbers on our servers — card data is tokenised and handled by our PCI-DSS-compliant payment processors.

2.4 Technical & Device Data

We automatically collect technical information when you access the tk667 platform, including your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), screen resolution, and referring URL. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.5 Usage & Behavioural Data

We record information about how you interact with the tk667 platform, including pages visited, games played, bets placed, session durations, click paths, and feature usage. This data helps us improve the player experience and identify responsible gaming patterns that may require intervention.

2.6 Communications Data

If you contact our customer support team, we retain records of those communications — including live chat transcripts, email correspondence, and any attachments — for quality assurance, dispute resolution, and regulatory compliance purposes.

2.7 Marketing Preferences

Where you have explicitly opted in to marketing communications, we store your preferences regarding promotional emails, SMS notifications, and special offers. You may update or withdraw these preferences at any time from within your account settings.

3 How We Collect Data

tk667 collects personal data through the following channels:

• Directly from you: Information you voluntarily provide during registration, KYC submission, deposit/withdrawal requests, form completions, and support interactions.
• Automatically: Technical and behavioural data collected via cookies, server logs, and analytics tools each time you access the platform.
• From payment processors: Transaction confirmations and payment status updates received from bKash, Nagad, Rocket, Upay, and other approved payment partners.
• From identity verification services: Results of automated document checks performed by our KYC verification partners during the account verification process.
• From fraud prevention services: Risk signals and device fingerprint data received from third-party anti-fraud tools used to protect the platform and its players.

4 Legal Basis for Processing

tk667 processes your personal data on the following legal bases:

5 How We Use Your Data

tk667 uses the personal data it collects for the following specific purposes:

• Account creation and authentication: To register your account, verify your identity at login, and maintain secure access to your player profile.
• Age and identity verification: To confirm that you are at least 21 years of age before enabling full platform functionality, in line with our strict responsible gaming policy.
• Transaction processing: To execute deposits, withdrawals, and internal transfers accurately and in a timely manner across all supported payment channels including bKash, Nagad, Rocket, Upay, and bank transfers.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other prohibited conduct on the tk667 platform.
• Responsible gaming: To monitor betting and gaming patterns for signs of problem gambling and to enforce player-set deposit limits, session time limits, cooling-off periods, and self-exclusion requests.
• Customer support: To respond to your enquiries, resolve disputes, and manage formal complaints in accordance with our published complaints procedure.
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and continuously improve the speed, reliability, and usability of the tk667 platform.
• Promotional communications: To send you information about bonuses, promotions, and platform updates — only where you have given explicit consent to receive such communications. You may unsubscribe at any time.
• Legal compliance: To fulfil our obligations under applicable laws and to respond to lawful requests from regulatory authorities or law enforcement bodies.

6 Data Sharing & Disclosure

tk667 does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only with parties that are contractually bound to protect it.

6.1 Payment Processors

Transaction data is shared with our approved payment partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard) solely for the purpose of processing your deposit and withdrawal instructions. Each payment partner operates under its own privacy policy and PCI-DSS compliance obligations.

6.2 Identity Verification Partners

KYC documentation and identity data may be shared with third-party identity verification services engaged by tk667 to validate the authenticity of your submitted documents and confirm your age. These partners are contractually prohibited from using your data for any purpose other than the specific verification task for which it was shared.

6.3 Fraud Prevention Services

Device identifiers, IP addresses, and behavioural signals may be shared with anti-fraud technology providers to assess risk scores and detect patterns associated with fraudulent account activity, bonus abuse, or financial crime. Results are used solely within the tk667 risk management framework.

6.4 Legal and Regulatory Disclosure

tk667 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, valid legal process, or to protect the rights, property, and safety of tk667, its players, or third parties. We will notify affected players of such disclosures where legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of tk667's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being subject to a materially different privacy policy.

7 Cookies & Tracking Technologies

tk667 uses cookies and similar technologies (such as web beacons and local storage) on its platform. These technologies serve the following purposes:

7.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your login session, remember your account preferences, and protect against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without impairing platform functionality.

7.2 Analytics Cookies

tk667 uses analytics tools to collect aggregated, anonymised data about how players navigate the platform. This information helps us identify popular games, detect usability issues, and prioritise development resources. Analytics cookies do not identify you personally.

7.3 Functional Cookies

Functional cookies remember your language preferences, last visited game category, and display settings to personalise your experience on return visits. These cookies improve platform convenience but are not strictly required for core functionality.

7.4 Security Cookies

Security cookies support our fraud detection systems by storing anonymised device fingerprint data used to identify unusual login patterns or suspicious account activity that may indicate an attempted account takeover.

7.5 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when cookies are being set. Please note that disabling essential cookies may prevent you from logging in or using core platform features. For detailed instructions on managing cookies in your specific browser, refer to your browser provider's help documentation.

8 Data Retention

tk667 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The table below summarises our standard retention periods by data category:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to you as an individual. Where data must be retained for ongoing legal proceedings or regulatory investigations, retention is extended for the duration of those proceedings.

9 Data Security

tk667 takes the security of your personal data seriously and implements a multi-layered security framework to protect it against unauthorised access, loss, destruction, or disclosure.

9.1 Encryption

All data transmitted between your device and tk667 servers is protected by 256-bit SSL/TLS encryption. Data stored on our servers is encrypted at rest using industry-standard encryption protocols. Payment card data is tokenised and processed exclusively by PCI-DSS Level 1 certified payment processors.

9.2 Access Controls

Access to personal data within tk667 is restricted to authorised staff members on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular access reviews. Staff members with access to personal data are subject to confidentiality obligations and receive regular data protection training.

9.3 Infrastructure Security

The tk667 platform is hosted on secure, redundant server infrastructure with firewalls, intrusion detection systems, and continuous security monitoring. We conduct regular vulnerability assessments and penetration testing to identify and remediate potential security weaknesses before they can be exploited.

9.4 Incident Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, tk667 will assess the breach promptly and notify affected individuals within a reasonable timeframe, providing details of the nature of the breach, data categories affected, likely consequences, and the remedial measures taken.

10 Your Rights

As a data subject, you have the following rights with respect to the personal data that tk667 holds about you. To exercise any of these rights, contact our support team using the contact details in Section 14.

• Right of Access: You have the right to request a copy of the personal data that tk667 holds about you, along with information about how it is used and with whom it is shared. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account information directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the processing is unlawful. Note that this right is subject to our legal retention obligations — we may be required to retain certain data even after an account is closed.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is contested, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or contract performance, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to Object: You have the right to object to the processing of your personal data where it is based on legitimate interests. tk667 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

We will respond to all data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

11 Children & Minors

The tk667 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age verification steps designed to prevent underage access, and our KYC process confirms the age of all players before withdrawal functionality is enabled.

If we become aware that personal data has been collected from an individual under the age of 21 without verifiable parental or guardian consent, we will immediately suspend the associated account, delete the data, and — where appropriate — report the matter to relevant authorities. If you believe that a minor has registered on the tk667 platform, please contact our support team immediately.

12 Third-Party Links

The tk667 platform may contain references to game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) and payment partners. While we take care to partner only with reputable organisations, tk667 has no control over and accepts no responsibility for the privacy practices of any third-party websites, services, or platforms that may be referenced in connection with the tk667 service.

This Privacy Policy applies solely to the tk667 platform at tk667.io. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the tk667 platform.

13 Policy Updates

tk667 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. The effective date at the top of this page reflects the date of the most recent revision.

Where changes are material — meaning they significantly affect your rights or how your data is used — tk667 will notify registered players via the email address on file or through a prominent notice displayed on the platform prior to the changes taking effect. For non-material updates, continued use of the tk667 platform following the updated effective date constitutes your acceptance of the revised policy.

We encourage all players to review this Privacy Policy periodically to stay informed about how tk667 protects and uses personal data. Previous versions of this Privacy Policy are available on request by contacting our support team.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data that tk667 holds about you, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Support Email: [email protected]
• Live Chat: Available 24/7 via the platform interface — the fastest route for urgent data concerns.
• Response Time: We aim to acknowledge all privacy enquiries within 24 hours and provide a substantive response within 30 days.
• Postal Address: For formal written requests, please use the contact email above to request our current mailing address.

When submitting a data rights request, please include your account username and a clear description of your request to help us locate your records and process your request efficiently. You may be asked to provide proof of identity before we action your request, to ensure that data is not disclosed to or modified by an unauthorised party.